Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3137372e33382e3132302e302f32312d3234203d3e203532393638.roa
File:                     3137372e33382e3132302e302f32312d3234203d3e203532393638.roa (raw, json)
Hash identifier:          KDuVluNRb0RD1G/sYD3nTbC4ICaPeEAIpHkHqV38+xo=
Subject key identifier:   52:89:41:1F:34:9D:D4:62:F5:8F:43:2A:45:8A:B5:97:C0:66:68:96
Certificate issuer:       /CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
Certificate serial:       2548CC174EB3AF9847252CF203C32712E18877B1
Authority key identifier: 2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3137372e33382e3132302e302f32312d3234203d3e203532393638.roa
Signing time:             Mon 04 Mar 2024 14:20:53 +0000
ROA not before:           Mon 04 Mar 2024 14:15:53 +0000
ROA not after:            Mon 03 Mar 2025 14:20:53 +0000
asID:                     52968
IP address blocks:        177.38.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:48:cc:17:4e:b3:af:98:47:25:2c:f2:03:c3:27:12:e1:88:77:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
        Validity
            Not Before: Mar  4 14:15:53 2024 GMT
            Not After : Mar  3 14:20:53 2025 GMT
        Subject: CN=5289411F349DD462F58F432A458AB597C0666896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:ba:d5:bf:6d:0a:e8:b9:24:9f:18:f0:0d:
                    80:22:89:75:66:a9:8d:ab:72:c1:a2:2c:3b:d3:6a:
                    c1:a6:69:d7:f3:0b:3f:d9:16:45:65:51:9e:dd:0c:
                    97:4b:28:17:57:76:21:b8:39:28:c8:fb:f1:0a:75:
                    ed:ff:c4:49:bb:2d:05:bc:dc:62:d9:36:f7:08:e1:
                    c7:97:d0:f1:3f:91:5d:82:42:ef:29:f5:f8:45:77:
                    23:0e:03:bc:04:35:54:b4:84:06:bd:a9:d0:83:8b:
                    5a:35:df:03:a4:b4:6e:cb:86:25:e2:6b:61:b8:1d:
                    25:8b:1b:5a:3d:0c:58:88:cf:d7:5e:2e:69:8f:6d:
                    70:28:2f:31:e9:c9:c2:aa:9e:20:ff:6f:d9:c5:2b:
                    2c:f9:ce:a7:28:e7:17:be:23:28:0b:aa:3d:75:11:
                    86:22:65:62:8d:a6:10:7c:cb:2d:8c:a4:7d:bf:4d:
                    a8:12:6d:be:e3:2f:66:07:a3:0a:22:57:48:4a:6a:
                    51:6f:7b:fd:c4:0e:df:79:69:79:54:cb:dd:45:8c:
                    a4:92:51:46:9e:4e:e7:dc:8e:3d:b6:cc:0c:99:d3:
                    7c:b0:6a:28:5e:77:d4:56:30:38:26:d7:66:b4:3b:
                    70:1e:29:4d:1b:5a:9c:04:fb:16:d2:bb:d4:b7:52:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:89:41:1F:34:9D:D4:62:F5:8F:43:2A:45:8A:B5:97:C0:66:68:96
            X509v3 Authority Key Identifier:
                keyid:2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3137372e33382e3132302e302f32312d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:37:6e:68:82:0a:bc:38:ea:70:d2:28:16:bb:fc:bc:fb:dc:
         b0:a3:89:a6:56:3a:e5:47:f9:f4:b3:f5:2d:a4:a1:ab:b5:c9:
         78:10:ef:44:77:78:77:ec:64:02:0c:7b:be:d7:b6:d8:8b:13:
         58:ac:09:c2:df:18:14:5b:6f:dd:92:f6:d0:91:ef:bc:91:e6:
         90:bb:f4:bd:f6:7a:c8:99:3d:a7:9b:cd:c3:b7:fe:48:18:8d:
         c6:65:1c:98:45:e7:37:68:3c:5e:06:67:01:a2:01:88:4f:41:
         ba:4c:65:4c:35:bd:ee:cb:b8:91:68:7f:d1:0e:be:91:c2:6f:
         01:14:ab:8a:19:0c:1c:a6:25:ec:5d:8e:5b:ab:f3:16:fc:67:
         6b:c4:a6:2d:91:1e:9c:a4:a8:aa:11:06:b2:98:f5:9e:4c:3f:
         ae:27:3b:ae:45:aa:c9:1c:ab:9e:61:0e:7b:2c:b3:ca:1f:24:
         da:d3:00:ce:2a:54:02:a7:1b:74:1f:44:3d:6e:73:80:71:75:
         9f:c5:1e:3f:43:6f:d7:8f:90:30:34:1f:8b:0a:ec:98:24:5e:
         80:d4:a0:a6:61:0e:38:19:04:eb:e6:37:d9:92:7a:27:1c:76:
         cc:ad:e9:90:dc:40:96:3c:bb:9a:d2:c3:2e:af:f1:4d:ed:de:
         0c:c5:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org